CVE-2026-105115 OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/ with an unverified session identifier and a chosen...

EUVD-2026-92019

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/ with an unverified session identifier and a chosen...

CVE-2026-105115

OpenAM versions prior to 16.1.3 are vulnerable to an unauthenticated arbitrary class instantiation vulnerability within the legacy JAX-RPC SOAP interface . Remote attackers can exploit this by sending SOAP requests to the */jaxrpc/ endpoint using an unverified session identifier and a specified c...

CVE-2023-20198

Resumen Este repositorio contiene un estudio de caso de ciberseguridad que analiza CVE-2023-20198, una vulnerabilidad crítica de día cero en el software Cisco IOS XE. El proyecto explora cómo se puede explotar la vulnerabilidad a través de la interfaz web y propone estrategias de mitigación...

CVE-2025-25612

CVE-2025-25612: Switch FS S3150-8T2F Vulnerabilidad de Cross Site Scripting XSS Almacenado CVE-2025-25612 FS Inc S3150-8T2F anterior a la versión S3150-8T2F2.2.0D135103 es vulnerable a Cross Site Scripting XSS en la funcionalidad de Configuración de Rango de Tiempo de la interfaz de administració...

CVE-2023-0861-POC

Analyzing and Reproducing the Command Injection Vulnerability CVE-2023-0861 in NetModule Routers NetModule is an Original Equipment Manufacturer OEM of industrial grade routers that are commonly used in critical infrastructure and industrial control systems. On February 24th, 2023, ONEKEY, a...

CVE-2025-45620

Detalles del problema La cámara modelo PTC310UV2 ejecuta la versión de firmware 0.1.0000.59. La vulnerabilidad se encuentra en la interfaz web que se utiliza para acceder a la cámara. La vulnerabilidad se descubrió durante una prueba de penetración, por lo que cierta información en las capturas d...

Kernelhub

CVE-2003-0352 Describe Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms. ImpactVersion Product| C...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

CVE-2020-12124

Anatomía de un Exploit de IoT, del Práctico al RCE originalmente en https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce por David E. Baker, publicado el 1 de junio de 2023 Prefacio Este estudio trata sobre el firmware del router Gigabit inalámbrico...

CVE-2023-31853

CVE-2023-31853 Existe un ataque de cross-site scripting XSS reflejado en la interfaz de gestión basada en web del Cudy LT400. La página /cgi-bin/luci/admin/network/bandwidth tiene XSS reflejado a través del parámetro icon. Los métodos de explotación implican enviar una solicitud especialmente...

cve-2024-0012_9474-panos_authbypass_reproduction

CVE-2024-0012 / CVE-2024-9474 — PAN-OS Authentication Bypass → Privilege Escalation Chain CVE| Description| CVSS ---|---|--- CVE-2024-0012| PAN-OS Management Interface Authentication Bypass| 9.3 CVE-2024-9474| PAN-OS Privilege Escalation| 6.9 When chained, these vulnerabilities allow...

PAN-OS Management Web Interface - Authentication Bypass

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege...

CVE-2020-16898_Check

CVE-2020-16898Check Pequeño script de PowerShell que comprueba si hay interfaces vulnerables...

[SECURITY] Fedora 45 Update: mediaconch-25.04-4.fc45

MediaConch is an implementation checker, policy checker, reporter, and fixer that targets preservation-level audiovisual files specifically Matroska, Linear Pulse Code Modulation LPCM and FF Video Codec 1 FFV1. This project is maintained by MediaArea and funded by PREFORMA. This package includes...

CVE-2026-105115: Missing Authentication for Critical Function

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/ with an unverified session identifier and a chosen...

PT-2026-104576

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.3 Description The legacy JAX-RPC SOAP interface contains an unauthenticated arbitrary class instantiation flaw. Remote attackers can send SOAP requests to the endpoint '/jaxrpc/' using an unverified session...

struts-rce-cve-2017-5638

struts-rce-cve-2017-5638 Struts-RCE CVE-2017-5638 Este es un exploit modificado que crea una webshell y proporciona una interfaz similar a bash/cmd para interactuar con la webshell en la consola...

proxy-workbench

Proxy Workbench Find proxies that work for the sites you use Collect addresses from public lists or your own files, check them against your services, and use the results in apps, exports, or scripts. Proxy Workbench runs locally with a browser interface, CLI, rotating proxy gateway, and API...

CVE-2026-75937

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...